Re: Logging sftp file transfers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



cfengine is great for this sort of thing :-)

Cheers,
Harry


Quoting Pete Nesbitt <pete@xxxxxxxxx>:

*> On February 13, 2004 10:21 am, Peter Fleck wrote:
*> > I want to know when a particular user adds a new .html file to our
*> > Web site. I only need this information for one user. After the file
*> > is transferred, a script will reset permissions for the file - so I
*> > need the file name. We use sftp for  file transfers.
*> >
*> > I know that sftp log-ins are listed in /var/log/secure but it's not
*> > enough information for what I want to do.
*> >
*> > What would be the best way to do this?
*> >
*> > Thanks.
*> >
*> > BACKGROUND: Our Web editors (human type) use Macromedia Contribute
*> > for working on pages. We need 755 or 775 permissions for the pages to
*> > use SSI and Contribute is resetting to 664 by default (even though
*> > the documentation states it will not change permissions).
*> >
*> > I've done some pretty extensive testing with the umask command and it
*> > does seem to be a Contribute problem, not an sftp or umask problem.
*> > --
*> > Peter Fleck
*> > Webmaster | University of Minnesota Cancer Center
*> > Dinnaken Office Bldg.
*> > 925 Delaware St. SE
*> > Minneapolis, MN  55414
*> > 612-625-8668 | fleck004@xxxxxxx | www.cancer.umn.edu
*> > Campus Mail: MMC 806
*> 
*> 
*> Hi,
*> just curious why you would need execute on files for ssi? It is not a
*> requirement for ssi to work. (except of course, dirs need exec)
*> 
*> Presuming you actually need the exec bit set for some reason, you could do a
*> few things, like run a script via cron over the web dir's and look for new
*> files (just keep a temp file with the last run dir list & compare) then
*> check
*> ownership (for that user) and make changes as needed.
*> 
*> Or, if the user is always at one IP, you could use TCPwrappers to execute a
*> script when there is an ftp access from that IP address.
*> 
*> hmm, could PAM help with this?
*> --
*> Pete Nesbitt, rhce
*> 
*> 
*> --
*> redhat-list mailing list
*> unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
*> https://www.redhat.com/mailman/listinfo/redhat-list
*> 


-- 
Harry Hoffman
hhoffman@xxxxxxxxxxxxxxxx

-------------------------------------------------
This mail sent through IpSolutions: http://www.ip-solutions.net/


-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux